'NOVACOOKIES' KIT STEALS MICROSOFT 365 SESSIONS FOR $320 A MONTH

Summary from the TLDR InfoSec newsletter

NovaCookies rents AitM phishing infrastructure for $320 monthly. It relays Microsoft 365 logins and steals authenticated session cookies, bypassing MFA. Island found at least 755 supporting domains targeting hundreds of organizations and uses fake DocuSign document shares and trusted redirect hops. Defenders should deploy phishing-resistant MFA, correlate browser and token activity, and revoke active sessions and refresh tokens after suspected compromise.